CVE-2018-18989

In CX-One Versions 4.42 and prior CX-Programmer Versions 9.66 and prior and CX-Server Versions 5.0.23 and prior, when processing project files, the application fails to check if it is referencing freed memory. An attacker could use a specially crafted project file to exploit and execute code unde...

CVE-2018-18989

In CX-One Versions 4.42 and prior CX-Programmer Versions 9.66 and prior and CX-Server Versions 5.0.23 and prior, when processing project files, the application fails to check if it is referencing freed memory. An attacker could use a specially crafted project file to exploit and execute code unde...

PT-2018-2003

Name of the Vulnerable Software and Affected Versions CX-One versions 4.42 and prior CX-Programmer versions 9.66 and prior CX-Server versions 5.0.23 and prior Description The issue is related to the use of memory after it has been freed, which can be exploited by an attacker using a specially...

PT-2018-2166

Name of the Vulnerable Software and Affected Versions SIMATIC STEP 7 TIA Portal versions prior to V15.1 Description A vulnerability has been identified that could allow an attacker to access a project file and reconstruct passwords due to password hashes with insufficient computational effort. Th...

CVE-2018-17909

When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior, the application fails to check if it is referencing freed memory, which may allow an attacker to execute code under the context of the application...

CVE-2018-17901

The CVE-2018-17901 entry concerns LAquis SCADA (versions 4.1.0.3870 and earlier). It describes a vulnerability in processing project files where input is not sanitized before write operations on a stack object, potentially allowing code to be executed in the context of the current process. Docume...

Heap overflow

Fuji Electric Alpha5 Smart Loader Versions 3.7 and prior. The device does not perform a check on the length/size of a project file before copying the entire contents of the file to a heap-based buffer...

CVE-2018-14794

Fuji Electric Alpha5 Smart Loader Versions 3.7 and prior. The device does not perform a check on the length/size of a project file before copying the entire contents of the file to a heap-based buffer...

CVE-2018-14794: Heap-based Buffer Overflow

Fuji Electric Alpha5 Smart Loader Versions 3.7 and prior. The device does not perform a check on the length/size of a project file before copying the entire contents of the file to a heap-based buffer...

PT-2018-12729

Name of the Vulnerable Software and Affected Versions Fuji Electric Alpha5 Smart Loader versions 3.7 and prior Description The issue arises because the device does not check the length or size of a project file before copying its entire contents to a heap-based buffer. Recommendations For Fuji...

Buffer overflow

A maliciously crafted project file may cause a buffer overflow, which may allow the attacker to execute arbitrary code that affects Fuji Electric V-Server Lite 4.0.3.0 and prior...

CVE-2018-10637: Buffer Copy without Checking Size of Input

A maliciously crafted project file may cause a buffer overflow, which may allow the attacker to execute arbitrary code that affects Fuji Electric V-Server Lite 4.0.3.0 and prior...

CVE-2018-13806: Uncontrolled Search Path Element

A vulnerability has been identified in SIEMENS TD Keypad Designer All versions. A DLL hijacking vulnerability exists in all versions of SIEMENS TD Keypad Designer which could allow an attacker to execute code with the permission of the user running TD Designer. The attacker must have write access...

PT-2018-1572

Name of the Vulnerable Software and Affected Versions Fuji Electric V-Server Lite versions 4.0.3.0 and prior Description The issue is related to a buffer overflow that can occur when parsing a maliciously crafted project file. This may allow an attacker to execute arbitrary code, cause a denial o...

Memory Corruption Vulnerability in Kewe's All-in-One Text Screen Configuration Software IOCS

Huangshi Kewei Automatic Control Co., Ltd. is an enterprise that develops, produces and sells embedded PLC, intelligent servo, human-machine interface and other series of industrial control products. A memory corruption vulnerability exists in IOCS, the Kewei Text All-in-One Screen Configuration...

Memory corruption vulnerability in Wecon PLC editor

Fuzhou Fuchang Wei-Control Electronic Technology Co., Ltd. is a technology company engaged in the research, development and sales of products in the field of automation. A memory corruption vulnerability exists in Wecon PLC editor. The vulnerability is caused due to the program parsing the projec...

Memory Corruption Vulnerability in AutoEnt

AutoEnt is a screen configuration software. A memory corruption vulnerability exists in AutoEnt. An attacker can exploit the vulnerability to cause memory corruption when reading a project file...

Memory Read Out-of-Bounds Vulnerability in Inventec VS Series HMI Programming Software

Shenzhen Inventec Electric Co., Ltd. is a product and service provider in the field of electrical transmission, industrial control and new energy. A memory read out-of-bounds vulnerability exists in Inventec's VS series HMI programming software. The vulnerability is caused due to a file failure t...

The vulnerability of Mitsubishi Electric’s E1000 E-Designer panel programming software lies in the ability to write data beyond the buffer in memory, allowing an attacker to execute arbitrary code or cause malfunctions during maintenance.

The vulnerability of Mitsubishi Electric’s E1000 E-Designer panel programming software lies in the fact that data is written beyond the buffer in memory when processing certain sections of the project file .mpa. Exploiting this vulnerability allows a malicious actor to execute arbitrary code unde...

Denial of Service Vulnerability in MXProgrammer Software

MXProgrammer software is a windows desktop software of Weihai Mack Electric Technology Co., Ltd. which is used to communicate with its MX series PLC products and complete the functions of program writing and downloading. A denial of service vulnerability exists in the MXProgrammer software...